A relying-party SDK for WayID, the provenance layer that binds a verified human or business identity to the AI agents they run. It targets the service on the receiving end of agent traffic — a gateway, reverse proxy, or API backend — and answers "what kind of agent is calling me?" in a single call, with no user-facing flow and no cryptography to operate. The repo hosts two language packages: a TypeScript package with Express and Cloudflare Worker adapters, and a Python package with FastAPI/Starlette and Flask adapters. A separate repo covers the NGINX integration.
The v1 scheme is passive: an agent self-declares its identity in a WayID request header carrying a DID, and the SDK resolves that DID against the issuer's public agent endpoint, caches the result, and applies a policy. It fails open by default — an issuer outage or unknown DID tags the request as unknown rather than blocking it. The README is explicit that this is identification, not authentication: the header proves the named DID exists and is owner-verified, not that the caller holds the agent's private key. Cryptographic proof-of-possession is planned as a v2 layer on Web Bot Auth / RFC 9421 HTTP Message Signatures. The project is a prototype.